What’s Vulnerable › Products

roadiz core-bundle-dev-app vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your roadiz core-bundle-dev-app version is affected

Latest roadiz core-bundle-dev-app vulnerabilities

• CVE-2026-42206 — Roadiz OpenID Connect nonce generated but never validated — ID token replay attack (CVSS 5.7)
• CVE-2026-33486 — Roadiz has Server-Side Request Forgery (SSRF) in roadiz/documents (CVSS 6.5)